Security Operations Center (SOC) Engineer
Core
Build and own a high-performance security operations function for a cross-border payment infrastructure, detecting threats, responding to incidents, and reducing systemic risk in real-time transaction flows.
Role type
Senior SOC Engineer / Security Operations Lead
Builds
Cloud infrastructure, identity systems, endpoints, and transaction monitoring systems for global financial institutions
Domain
Fintech, cross-border payments, high-volume transaction processing
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
SOC function building, incident response, security investigations, SIEM platform engineering, cloud security (AWS/GCP/Azure), identity systems, SaaS telemetry, operational metrics definition, team leadership
Preferred skills
Fintech/payments experience, regulatory frameworks (SOC 2, ISO 27001, NIST, CIS), EDR/SOAR/DLP/CASB/MDM, fraud detection models, CI/CD security
Technologies
SIEM, AWS, GCP, Azure, EDR, SOAR, DLP, CASB, MDM
Responsibilities
Build and operationalize SOC monitoring across cloud, infrastructure, identity, endpoints, and transaction systems; Lead end-to-end incident response including containment, eradication, and root cause analysis; Design high-signal alerting strategies to reduce noise and improve SIEM use cases; Define and track security KPIs and KRIs including detection coverage and false positive rates; Integrate security reviews into new feature launches ensuring logging and auditability; Hire, mentor, and level up analysts and detection engineers
Seniority
Senior, hands-on IC with leadership responsibilities